CONTINUOUS INTERNET TELEMETRY24H DRIFT2,067 material changesacross 1,932 domains · +645 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW986 curated domains not answering+276 vs yesterdayERRORS7,540 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED20,314 throttled or blocked our scanner429 rate-limit / 403 bot-block24H DRIFT2,067 material changesacross 1,932 domains · +645 vs yesterdayDNS DRIFT15 domains changed DNS providertop destination alidns.com · -6 vs yesterdayEMAIL DRIFT8 domains switched email providertop destination google.com · +3 vs yesterdayCERT DRIFT46 domains switched issuing CA24h · +46 vs yesterdayNOW986 curated domains not answering+276 vs yesterdayERRORS7,540 responded with an errorlast probe · 5xx / 404 / TLSTHROTTLED20,314 throttled or blocked our scanner429 rate-limit / 403 bot-block

startmail.com

Observed Jul 18, 2026, 13:53 UTC (8h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now
Runs onRoutit
Email byZendesk
Secured byLet's Encrypt
Registered withHosting Concepts B.V. d/b/a Registrar.eu
Also usesGoogle Search Console
IPv6 · 9 subdomains · tranco_40k
Every line above is a signed observation. Check the math at the bottom of the page.
INFRASTRUCTURE MAPwhat startmail.com actually stands on - every host below is a signed observation
startmail.com
A / AAAA
145.131.90.136145.131.90.1522a02:22a0:bbb6:1d00::1001:4432a02:22a0:bbb6:1d00::1002:443
Routitserves the site
NS
dns31.cloudns.netdns32.cloudns.netdns33.cloudns.netdns34.cloudns.net
cloudns.netanswers its DNS
MX
mx1.startmail.commx2.startmail.commx3.startmail.commx4.startmail.com
Zendeskreceives its email
TLS
startmail.com
Let's Encryptissued its certificate

DNS Records

A 2

  • 145.131.90.136
  • 145.131.90.152

AAAA 2

  • 2a02:22a0:bbb6:1d00::1001:443
  • 2a02:22a0:bbb6:1d00::1002:443

MX 4

  • 10mx1.startmail.com
  • 10mx2.startmail.com
  • 20mx3.startmail.com
  • 30mx4.startmail.com

TXT 5

  • v=spf1 include:spf.startmail.com include:mail.zendesk.com ~all
  • google-site-verification=C657dqp16Y0cGcLHCmZHmMsaaIVeprybtgiRi_DukZE
  • google-site-verification=p92r087LlIf2FNd7HXto_b9YGxOJ7kZgzctnVDneKxI
  • v=DMARC1; p=quarantine; sp=quarantine; adkim=r; aspf=r; pct=100
  • v=STSv1; id=2023100501

NS 4

  • dns31.cloudns.net
  • dns32.cloudns.net
  • dns33.cloudns.net
  • dns34.cloudns.net

SOA 1

  • dns31.cloudns.net support.cloudns.net

SRV 2

  • imap.startmail.com:993 p0
  • smtp.startmail.com:465 p0

CAA 3

  • iodef "mailto:root@startmail.com"
  • issue "letsencrypt.org"
  • issuewild "letsencrypt.org"

TLS Certificates (3)

Common NameIssuerExpires
startmail.com C=US, O=Let's Encrypt, CN=YR2 Sat, 29 Aug 2026 16:11:39 +0000
YR2 C=US, O=ISRG, CN=Root YR Sat, 02 Sep 2028 23:59:59 +0000
Root YR C=US, O=Internet Security Research Group, CN=ISRG Root X1 Thu, 02 Sep 2032 23:59:59 +0000

Subdomains (9)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for startmail.com. It updates itself. It attests a signed observation - not that the site is safe.

DomainDrift signed-observation badge for startmail.com <a href="https://domaindrift.io/t/startmail.com"> <img src="https://domaindrift.io/badge/startmail.com.svg" width="300" height="64" alt="DomainDrift signed observations for startmail.com"> </a>

Ed25519 Receipt

Receipt ID
3f6348e8-3af5-4829-a8a6-108c5f89ae57
Output Hash
edb20702672b2658f15fa9a3446931cb0e0b04871ddc20ea3e2c474ceed5162b
Signature
ed25519:9153f9d0a302668ae80a9ae0006e513555750f97b18da4f428d610707b88c5c7257888d9a60344ae487570b74f8ba1e99d8d5dbbb621a444eaf31fe99399670d
Public Key
ed25519:178c3bd0f57d9d64b83cc4630753381e1a465005a2bbba3d032371f24af0bfd8
Parent
(genesis)
Plane
fast
Verify this in your browser